docs: record verified development delivery and explicit release gates

Document independent native architecture, server compatibility, build/signing procedures, privacy limitations and persistent continuation steps. Record two consecutive seven-test API 35 HTTPS/OIDC passes, portable and host-tool checks, and inspected unsigned artifacts. Explicitly withhold production readiness pending Apple SDK validation, API 37/current-device testing, real IdPs, resource-limit review, human security review and maintainer signing.

THIRD_PARTY_NOTICES.md

@@ -31,3 +31,23 @@ SOFTWARE.
 Android build dependencies retain their own licenses (Android SDK/platform APIs,
 AndroidX: Apache-2.0; Kotlin: Apache-2.0; Gradle: Apache-2.0).
 Apple system frameworks are provided by the operating system, not vendored here.
+
+## Gradle wrapper notice
+
+The unmodified official Gradle wrapper JAR retains `META-INF/LICENSE` (Apache-2.0).
+The corresponding Gradle distribution NOTICE is reproduced below:
+
+This product includes software developed by
+The Apache Software Foundation (http://www.apache.org/).
+
+It includes the following other software:
+
+Groovy (http://groovy-lang.org)
+SLF4J (http://www.slf4j.org)
+JUnit (http://www.junit.org)
+JCIFS (http://jcifs.samba.org)
+HttpClient (https://hc.apache.org/httpcomponents-client-4.5.x/)
+
+For licenses, see the LICENSE file supplied in the Gradle distribution.
+If any software distributed with Gradle does not have an Apache 2 License, its
+license is explicitly listed in that distribution's LICENSE file.